Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
File:                     ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa (raw, json)
Hash identifier:          mFD3KyUHfoVRErrNgq8vMRp1BXynVmTkvlo0T952q9o=
Subject key identifier:   F7:3D:DB:21:DD:7F:A2:A8:B9:E7:A5:88:43:05:D3:5F:04:0A:45:1A
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285848A830B0DA90AFE3BD41760238
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2602:277:d0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b0:da:90:af:e3:bd:41:76:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=af9ad08e-5152-481d-b296-fa67b6effd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5d:24:e5:a0:87:42:a4:56:45:44:e6:e7:14:
                    21:63:9d:59:72:da:34:ce:c5:c8:fd:c7:f0:2d:86:
                    9e:a9:b6:88:73:ff:9c:2c:94:4f:66:13:d5:a8:07:
                    44:3a:75:02:ad:3f:c3:71:9f:53:58:bf:87:d6:de:
                    7b:70:46:f2:59:b9:f8:90:50:3c:93:f6:b2:6e:6f:
                    96:22:7d:87:9f:d6:5b:84:76:40:5a:60:e3:20:01:
                    b9:8b:cf:19:6c:9d:b0:c8:17:2f:96:a5:6f:ee:3b:
                    bd:f0:57:b9:72:5a:69:3c:5f:2e:f0:ed:3a:a0:e3:
                    1a:6f:37:53:a2:2e:5a:95:71:46:81:7f:1d:57:4a:
                    26:a2:d6:8d:1c:77:96:5c:bf:d7:57:b1:77:41:2d:
                    be:b7:75:93:8b:3b:60:00:2c:49:0e:b7:4f:0b:e7:
                    4d:71:b0:44:78:05:f5:30:5f:78:79:15:8d:4a:d4:
                    de:9a:87:4d:5d:80:64:8e:92:a5:08:0c:a9:1a:78:
                    1b:c2:0b:47:8f:d0:db:25:54:df:9e:3d:16:b9:df:
                    95:07:5b:4e:41:59:65:fa:de:07:1c:eb:b3:ba:e1:
                    23:8b:35:f9:74:14:7e:aa:26:61:81:0c:5d:44:7d:
                    c0:9c:7f:d1:78:7b:9a:e4:02:c9:c8:77:30:7e:bb:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3D:DB:21:DD:7F:A2:A8:B9:E7:A5:88:43:05:D3:5F:04:0A:45:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:94:9c:01:77:27:de:13:a5:03:e4:7c:6d:c8:18:72:d8:06:
         14:40:71:4b:57:86:1b:a6:e4:c1:68:e7:93:d5:a2:2e:c4:71:
         77:d5:63:73:3e:a8:6a:bd:75:9c:47:49:63:ec:6e:62:20:9b:
         21:3b:1b:5b:cc:65:57:6d:0a:71:34:0c:3d:5b:4c:d7:15:75:
         a8:12:65:ba:aa:b5:2c:08:b6:aa:4d:39:19:55:6e:50:31:2c:
         01:e5:6d:2e:58:f0:ff:de:19:d5:4c:2d:02:75:f2:e1:c9:dd:
         28:72:5a:cb:11:f5:09:aa:d7:cb:22:f1:77:2b:71:d0:6c:d4:
         a5:b3:10:ee:7f:a8:d7:9f:63:be:8d:ac:33:d2:0e:66:91:a5:
         c9:de:99:5a:21:f2:a1:4b:e6:ac:bc:5a:4d:d0:b9:03:2e:f3:
         fe:c0:fe:cd:75:85:ff:76:2b:e7:43:14:28:84:6b:e0:b3:af:
         8a:ac:79:e9:15:ca:5f:52:20:4b:e9:92:2c:d0:23:bc:09:e3:
         c2:85:9b:7b:df:bf:0f:ac:7d:3f:bc:5c:7f:4b:5d:45:f9:71:
         ad:8e:04:1f:26:82:f4:39:f0:a8:31:6c:f0:18:d7:9e:05:bf:
         76:4a:57:43:10:3f:6c:59:02:18:7f:0d:fa:1a:1e:ee:36:f5:
         c8:b2:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:28 2025 by rpki-client